Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e2039333034.roa
File:                     34352e34322e34362e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          5J4kZBbd2Oo5ng2q0ZtXZwcnjcHHNDPuHiPR1fqPU9g=
Subject key identifier:   F1:23:8A:12:B5:6A:F1:2F:58:FE:23:F1:D3:42:EF:AE:D9:0F:F6:54
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       30C36B500A6EFFA446AB05293DAC3F43D1BF6EDF
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 19 Oct 2025 12:52:16 +0000
ROA not before:           Sun 19 Oct 2025 12:47:16 +0000
ROA not after:            Sun 18 Oct 2026 12:52:16 +0000
asID:                     9304
IP address blocks:        45.42.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c3:6b:50:0a:6e:ff:a4:46:ab:05:29:3d:ac:3f:43:d1:bf:6e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Oct 19 12:47:16 2025 GMT
            Not After : Oct 18 12:52:16 2026 GMT
        Subject: CN=F1238A12B56AF12F58FE23F1D342EFAED90FF654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:da:42:b5:e3:ca:20:65:3d:ca:59:43:75:
                    8c:86:47:d7:ca:24:b7:5c:c8:00:45:0d:8f:ec:56:
                    fc:7c:b7:78:53:f5:95:c5:00:46:25:11:41:67:73:
                    3c:fa:d0:68:69:6f:9c:12:31:4a:d4:5d:a6:e3:8e:
                    72:b2:32:eb:10:7c:f5:4b:0e:32:f6:b8:51:4c:ce:
                    94:fa:d2:3b:d7:95:3e:7f:7a:a4:bf:6e:14:7e:5e:
                    d6:53:89:c4:d8:7b:f2:b0:4d:a6:02:8a:c7:69:5e:
                    33:83:a8:04:36:e5:1a:d0:ca:fe:13:8f:f8:a4:5e:
                    42:9c:b4:7a:51:c1:95:9d:c1:6a:1c:98:da:32:07:
                    17:93:e9:cf:f9:36:89:b5:80:5b:23:11:86:0e:67:
                    aa:e5:59:d3:e3:33:42:3e:14:37:49:b4:6c:0a:2b:
                    8d:7e:1a:e4:67:09:21:4c:5f:73:c4:9a:72:85:0c:
                    03:e3:91:80:f5:d1:b2:6d:eb:cf:ab:c2:93:f4:ed:
                    61:88:2b:73:51:6c:31:a4:11:5d:d8:1b:c2:d0:02:
                    fb:f3:55:7e:a6:59:d8:45:49:59:7c:ff:f0:f6:73:
                    ae:8a:64:48:73:25:84:73:0f:91:db:e2:ca:da:d1:
                    e5:cc:f3:fb:3b:e7:26:3a:ae:91:63:29:b3:b2:c3:
                    d3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:23:8A:12:B5:6A:F1:2F:58:FE:23:F1:D3:42:EF:AE:D9:0F:F6:54
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:34:3a:94:d5:73:c3:a3:06:e7:1f:83:15:a6:db:6b:eb:bd:
         00:e7:36:32:38:ff:0f:af:58:30:36:66:5f:68:6c:04:11:21:
         76:34:0d:96:75:30:08:50:0f:74:c7:e0:2a:4e:78:7e:36:f3:
         15:8c:a3:89:4c:e2:84:5f:31:16:67:f5:70:e6:d0:c5:9a:dc:
         6d:c1:9b:fe:43:c1:02:b7:ab:29:4c:2c:54:e2:2e:6c:80:89:
         52:17:80:ca:81:bb:8e:01:69:df:56:ed:07:4d:97:bc:d6:09:
         5f:f8:06:cb:7b:69:45:bb:32:28:f7:39:a3:34:5e:cb:e3:e2:
         de:23:2b:d7:89:99:60:98:38:a1:bd:05:77:37:a6:da:32:4f:
         b1:ab:f1:bf:51:9e:70:14:4c:37:53:6e:b7:d9:c1:18:2c:c9:
         97:21:59:f7:29:68:47:b2:09:ad:2f:6c:18:41:e2:df:47:67:
         db:67:1e:a5:18:fb:6b:a2:66:b4:72:24:2e:4e:e5:58:fb:7c:
         27:c6:e2:f0:13:8e:61:cd:68:cd:08:9c:8e:29:97:ff:5a:b7:
         cf:b2:6f:5a:21:7d:ac:7c:22:3f:18:f3:77:5d:11:cb:88:ee:
         ad:da:75:22:98:f9:f1:61:13:1c:22:c7:81:f5:55:7d:fe:70:
         1a:31:3b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:59:32 2025 by rpki-client